Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 28.04.2014, 13:37   #1
M4tt0
 
Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J



Liebes Board,

nachdem ich mich kuerzlich mit meinem Laptop auseinandergesetzt habe, weil ich dachte ich hätte einen Virus (aber keinen hatte), habe ich mir nun meinen aelteren Desktop vorgeknoepft. Ich dachte eigentlich der sei sauber, aber das scheint nicht so zu sein.

Der vollständige Scan mit Avast meldete mir zunächst 2 Funde:
HTML: IFrame-inf
JS: Agent-CYP [Expl]
Danach schlug mir Avast vor, einen Scan vor Start des Betriebssystems zu fahren. Habe ich gemacht. Dabei kamen 2 weitere Funde zu Tage. Beide Male
Win32: Somoto-J [PUP]
und jeweils im Windows.old Folder. Scheinen also Altlasten zu sein.
Alle Funde habe ich automatisch korrigieren lassen. Liegen jetzt im Virus Container. Habe versucht die Einträge in ein Text-File zu kopieren, aber nicht geschafft. Wenn Ihr Details braucht, lasst mich bitte wissen, welchen Log-File Ihr braucht und wo ich den finde.

Entsprechend Eurer Anleitung, habe ich den Defogger enabled und FRST ausgeführt.

Hier die Logs:

FRST

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014
Ran by [USRNAME] (administrator) on HAN on 28-04-2014 14:18:13
Running from C:\Users\[USRNAME]\Desktop
Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-27] (AVAST Software)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [150208 2014-04-20] (IvoSoft)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3226048418-3006157909-989406201-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3226048418-3006157909-989406201-1004\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [515584 2013-08-22] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Statusfenster.lnk
ShortcutTarget: Canon LBP2900 Statusfenster.lnk -> C:\Windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE (CANON INC.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB5C2046CF412CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default
FF Homepage: hxxp://www.tagesschau.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-16]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [605168 2013-12-20] (Paramount Software UK Ltd)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2014-03-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-27] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [81768 2014-04-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [776976 2014-04-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411552 2014-04-27] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [67776 2014-04-27] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-27] ()
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-03-18] (Microsoft Corporation)
S3 gdrv; C:\WINDOWS\gdrv.sys [17488 2014-04-28] (Windows (R) 2000 DDK provider)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-04-28] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-28 14:18 - 2014-04-28 14:18 - 00010256 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 14:18 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:16 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\Trojaner-Board
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 10:56 - 2014-04-28 10:57 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2014-04-27 23:36 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:13 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-04-28 00:06 - 2014-04-28 00:09 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2014-04-28 00:07 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:52 - 2013-10-31 01:38 - 00202584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-04-27 23:52 - 2013-10-31 01:38 - 00093016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-04-27 23:52 - 2013-10-31 01:36 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-14 20:13 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-27 23:47 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-27 23:47 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-27 23:47 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-27 23:45 - 2014-04-27 23:47 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:24 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:19 - 2014-04-28 14:00 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-27 23:19 - 2014-03-20 23:03 - 00053024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-04-27 23:19 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-04-27 23:19 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe
2014-04-27 23:18 - 2014-04-28 11:55 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 23:18 - 2014-04-27 23:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 22:46 - 2014-04-27 23:33 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 21:26 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 21:25 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-04-28 14:18 - 2014-04-28 14:18 - 00010256 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 14:18 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:16 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\Trojaner-Board
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 14:15 - 2014-04-27 23:24 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-28 14:07 - 2014-03-18 10:04 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-28 14:01 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-28 14:00 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-28 12:28 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-28 12:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-28 11:55 - 2014-04-27 23:18 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-28 11:50 - 2014-01-16 23:57 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-28 11:28 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-04-28 11:15 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-28 11:05 - 2014-01-16 22:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\ClassicShell
2014-04-28 10:57 - 2014-04-28 10:56 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:56 - 2014-01-17 00:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:47 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\System
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 03:35 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\LogFiles
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2013-08-22 10:17 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-04-28 00:16 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:09 - 2014-04-28 00:06 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:07 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00776976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00271264 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-04-27 23:58 - 2014-01-16 21:55 - 00180632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00081768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Defender
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-27 23:45 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\Program Files\Java
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:44 - 2014-01-16 22:02 - 00000000 ____D () C:\ProgramData\ClassicShell
2014-04-27 23:44 - 2014-01-16 22:01 - 00000000 ____D () C:\Program Files\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:43 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-04-27 23:38 - 2014-03-18 11:45 - 00000000 ___HD () C:\$Windows.~BT
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-28 00:16 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:34 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows NT
2014-04-27 23:34 - 2013-08-22 08:21 - 00000000 __RHD () C:\Users\Default
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:33 - 2014-04-27 22:46 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 23:33 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Registration
2014-04-27 23:33 - 2013-08-22 09:23 - 00332763 _____ () C:\WINDOWS\setupact.log
2014-04-27 23:32 - 2013-08-22 10:17 - 00000000 __RSD () C:\WINDOWS\Media
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:31 - 2013-08-22 10:17 - 00000000 __RHD () C:\Users\Public\Libraries
2014-04-27 23:31 - 2013-08-22 08:21 - 00000000 ___RD () C:\Users\Public
2014-04-27 23:28 - 2013-08-22 09:22 - 00474824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 23:27 - 2014-04-27 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 23:27 - 2014-03-22 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar
2014-04-27 23:27 - 2014-03-22 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-04-27 23:27 - 2014-03-18 09:45 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-04-27 23:27 - 2014-03-18 09:30 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-04-27 23:27 - 2014-03-05 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlacSquisher
2014-04-27 23:27 - 2014-03-05 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-04-27 23:27 - 2014-03-05 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2014-04-27 23:27 - 2014-03-03 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-27 23:27 - 2014-02-18 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-27 23:27 - 2014-01-17 22:51 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-04-27 23:27 - 2014-01-17 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2014-04-27 23:27 - 2014-01-16 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Player
2014-04-27 23:27 - 2014-01-16 23:26 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-04-27 23:27 - 2013-08-22 10:18 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-04-27 23:27 - 2013-08-22 08:13 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-27 23:27 - 2012-07-26 06:43 - 00000000 ____D () C:\Users\Default.migrated
2014-04-27 23:26 - 2014-04-27 23:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:26 - 2014-03-22 23:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic
2014-04-27 23:26 - 2014-03-22 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
2014-04-27 23:26 - 2014-03-03 21:32 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-04-27 23:26 - 2014-01-16 21:50 - 00000000 ____D () C:\ProgramData\PRICache
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Help
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:25 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:21 - 2014-01-16 21:46 - 00000000 __SHD () C:\Recovery
2014-04-27 23:19 - 2014-04-27 23:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 23:17 - 2014-03-18 01:54 - 00000800 _____ () C:\WINDOWS\PFRO.log
2014-04-27 23:07 - 2014-01-16 21:50 - 02041337 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-04-27 22:51 - 2014-01-16 21:41 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-04-27 22:34 - 2012-07-26 08:53 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-27 21:24 - 2014-01-17 01:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Foxit Software
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-15 11:16 - 2014-01-16 21:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-14 20:13 - 2014-04-27 23:47 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-14 20:05 - 2014-04-27 23:47 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-14 20:05 - 2014-04-27 23:47 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-14 20:04 - 2014-04-27 23:47 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-14 09:14 - 2014-01-16 23:32 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-14 09:11 - 2014-01-16 22:28 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-14 09:10 - 2014-01-16 22:28 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-03-31 23:23 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-31 23:23 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\[USRNAME]\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\[USRNAME]\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2014-04-28 00:15] - [2014-04-28 00:15] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75

C:\WINDOWS\system32\winlogon.exe
[2014-03-18 10:08] - [2014-03-18 10:08] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F

C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30

C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2014-03-18 10:08] - [2014-03-18 10:08] - 0265048 ____A (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539



LastRegBack: 2014-04-27 23:17

==================== End Of Log ============================
         
Addition

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-04-2014
Ran by [USRNAME] at 2014-04-28 14:18:49
Running from C:\Users\[USRNAME]\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

@BIOS (HKLM\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.20 - GIGABYTE)
µTorrent (HKCU\...\uTorrent) (Version: 3.4.0.30660 - BitTorrent Inc.)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2018 - Avast Software)
AXIS CAPT Print Monitor 2.20 (HKLM\...\{7048796B-78EB-45a0-82AF-E8031F4AAE68}) (Version:  - )
Canon LBP2900 (HKLM\...\Canon LBP2900) (Version:  - )
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP)
Classic Shell (HKLM\...\{E0E49E80-19DE-43FE-BFF2-8C58DDF3C7F9}) (Version: 4.1.0 - IvoSoft)
Colin McRae Rally 2 (HKLM\...\{19B72AA9-985A-11D4-9C8A-00D0B75D1498}) (Version:  - )
Colin McRae Rally 2005 (HKLM\...\{CC67770B-581D-4E96-B72A-A7907CE18725}) (Version: 1.00.000 - )
Colin McRae Rally 3 (HKLM\...\{D26D1A53-D8A2-4004-BC98-0642B4EEAAB2}) (Version: 1.00.000 - )
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{9D8D67FD-8FAB-4B98-A121-4CFA10380058}) (Version:  - Microsoft)
Exact Audio Copy 1.0beta3 (HKLM\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff)
FlacSquisher 1.2.1 (HKLM\...\FlacSquisher) (Version: 1.2.1 - FlacSquisher)
Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.2.75.126 - Foxit Corporation)
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 6.1.4.217 - Foxit Corporation)
ImgBurn (HKLM\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
ISO Workshop 5.1 (HKLM\...\ISO Workshop_is1) (Version:  - Glorylogic)
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 5.2 - Paramount Software (UK) Ltd.)
Macrium Reflect Free Edition (Version: 5.2.6444 - Paramount Software (UK) Ltd.) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mp3tag v2.58 (HKLM\...\Mp3tag) (Version: v2.58 - Florian Heidenreich)
NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.3523 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
QuickPar 0.9 (HKLM\...\QuickPar) (Version: 0.9 - Peter B. Clements)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.24 - Piriform)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2752087) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{90060D4D-6BB2-4B29-B804-3C23563EEA6B}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{885A0D95-13A8-4A31-B01C-B02454F414AA}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6764E50D-D076-41BC-B069-08DD488AE88B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817636) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2D355F71-076A-42AD-8747-6132105441F4}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817636) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{2D355F71-076A-42AD-8747-6132105441F4}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2825631) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{E458713D-E208-4098-A155-EA1152F9B301}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2825631) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E458713D-E208-4098-A155-EA1152F9B301}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2827272) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{5A645CF3-3C40-4172-BCEB-19E3FC855266}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863825) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{96754DD8-5AF9-4CF8-A5A9-19770CD9AFBC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863844) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{8AEAF88E-A488-4C1E-B10D-F00143BA650F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863860) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{4E47A3B9-D863-4CE7-9488-847F2981361B}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{48D4C003-065C-460C-A864-BB18A159F3D6}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2863864) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{48D4C003-065C-460C-A864-BB18A159F3D6}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2817628) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{DF36A224-4C72-4FF4-9961-CD4873DDAE6C}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{DA3F3D63-4C9F-407B-9CA1-39638F85BDDD}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6022B459-32A4-4318-A9A4-815C0BCEF977}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2837627) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CA8215E2-4E68-4BCA-BBEB-D4ED8140F037}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2837627) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{CA8215E2-4E68-4BCA-BBEB-D4ED8140F037}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2863909) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{FF3BD143-BA46-4948-A71F-5B07AA1706BB}) (Version:  - Microsoft)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WinRAR 5.01 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Restore Points  =========================

27-04-2014 21:43:31 Classic Shell wird installiert

==================== Hosts content: ==========================

2013-08-22 08:13 - 2013-08-22 08:13 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00BC77BF-3352-4FE8-9617-4F1B27BEC19A} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {01BCC00A-C6A8-474C-BA2D-3076F3CE544D} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\WINDOWS\system32\cleanmgr.exe [2014-03-18] (Microsoft Corporation)
Task: {02B97B27-29F3-4F0D-B9D9-1A218C58AD6F} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {030754FE-CD22-4524-9223-F6029F8661B2} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Han-[USRNAME] Han => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-01-23] (Microsoft Corporation)
Task: {03F00483-DFF0-469F-88A0-E7C9E3D9F4A7} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {1162FB25-B404-4E6D-81F6-5CED9D9E2420} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {17233BE9-87E9-40B0-B003-AE9D2B92CBBE} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {247BD142-0549-4E91-84B0-172C25563718} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {2BE65564-89D1-4396-A5CC-D7D9283FC4A1} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {392EB017-207C-42BF-A061-F3BE721F456C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {3BCE7CAA-B219-4DE1-A204-6D95E59A8C10} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-27] (AVAST Software)
Task: {4B7EF56A-8A42-4BD2-BB5C-7C389AC54A37} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {4BEFF2C3-9BE2-4BB2-B0C5-4AD60B7F7DA7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {52CFA6F2-C156-4D64-9023-F3982C0F565C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {5700ACE8-D0AF-4BA7-98B6-1033521A877A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {6E84A59B-1863-4B21-8BD8-C9B20FD15484} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {7276DEEA-6ED2-4091-AF19-079E9B8C56C7} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {7C7CF1DA-F461-4850-96B2-ADCA8A67E59C} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {87C4F0B9-1B6C-440D-8BC1-8A9517983749} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {8B5819AE-7B44-478B-A3D3-8846AF160A8F} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {8D467E35-0DE8-478D-A88B-1B1394AEE325} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-14] (Adobe Systems Incorporated)
Task: {92ED6570-4654-4BFA-9A6C-1084C6939C16} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {997C8BBD-710B-4E66-B5BC-CC09575A58D2} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {A5D45ED3-F524-4574-8F39-527F3729D1E2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\WINDOWS\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {A97156F7-9175-4E02-8CEB-18A7169BE521} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {C0D0F7C4-419F-41B3-90A2-FE79270B828A} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {C259DDA0-DC67-4D80-8DBF-0FA873C25882} - System32\Tasks\Microsoft\Windows\SetupSQMTask => C:\WINDOWS\SYSTEM32\OOBE\SETUPSQM.EXE [2013-08-22] (Microsoft Corporation)
Task: {CF5A1DDC-D14D-4D59-AD49-A19A645B087B} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DCF55BED-B1DF-4ABF-8D85-6542C7007799} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {E4C8774A-2818-45A4-8A6D-11DDF6348886} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {E80A920D-59BD-491A-AB7A-C55ED54079A9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: {F7217E62-6F97-491F-A19B-413BDD5879FF} - System32\Tasks\Microsoft\Windows\Setup\SetupCleanupTask
Task: {FAB49829-3EE7-4234-BE84-277862F2A57C} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-04-27 23:19 - 2014-03-04 14:34 - 00109000 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-04-28 10:28 - 2014-04-28 10:28 - 02252800 _____ () C:\Program Files\AVAST Software\Avast\defs\14042800\algo.dll
2014-04-28 00:06 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-04-28 00:06 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-04-28 00:06 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2014-04-28 00:06 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-04-28 00:06 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2010-07-04 23:32 - 2010-07-04 23:32 - 00004608 _____ () C:\Program Files\Unlocker\UnlockerHook.dll
2010-07-04 23:32 - 2010-07-04 23:32 - 00010752 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2014-01-16 21:55 - 2014-01-16 21:55 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2010-07-04 21:51 - 2010-07-04 21:51 - 00017408 _____ () C:\Program Files\Unlocker\UnlockerAssistant.exe
2014-04-14 20:07 - 2014-04-14 20:07 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-03-14 09:50 - 2014-03-14 09:50 - 16276872 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Fast-Ethernet-Netzwerkkarte für Realtek RTL8139/810x-Familie
Description: Fast-Ethernet-Netzwerkkarte für Realtek RTL8139/810x-Familie
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp.
Service: RTL8023xp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (04/27/2014 11:43:34 PM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (04/15/2014 08:45:11 AM) (Source: Desktop Window Manager) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.

Error: (03/22/2014 10:35:30 PM) (Source: Application Hang) (User: )
Description: Programm uTorrent.exe, Version 3.4.0.30660 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: c60

Startzeit: 01cf460df780f995

Endzeit: 0

Anwendungspfad: C:\Users\[USRNAME]\AppData\Roaming\uTorrent\uTorrent.exe

Berichts-ID: 7ee2a833-b201-11e3-afa8-001d7d9a5cf5

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (03/05/2014 09:21:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cdrdao.exe, Version: 0.0.0.0, Zeitstempel: 0x429e389d
Name des fehlerhaften Moduls: cygwin1.dll, Version: 1005.24.0.0, Zeitstempel: 0x45c06855
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b48b6
ID des fehlerhaften Prozesses: 0xc20
Startzeit der fehlerhaften Anwendung: 0xcdrdao.exe0
Pfad der fehlerhaften Anwendung: cdrdao.exe1
Pfad des fehlerhaften Moduls: cdrdao.exe2
Berichtskennung: cdrdao.exe3
Vollständiger Name des fehlerhaften Pakets: cdrdao.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: cdrdao.exe5

Error: (03/05/2014 08:24:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: cdrdao.exe, Version: 0.0.0.0, Zeitstempel: 0x429e389d
Name des fehlerhaften Moduls: cygwin1.dll, Version: 1005.24.0.0, Zeitstempel: 0x45c06855
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b48b6
ID des fehlerhaften Prozesses: 0x878
Startzeit der fehlerhaften Anwendung: 0xcdrdao.exe0
Pfad der fehlerhaften Anwendung: cdrdao.exe1
Pfad des fehlerhaften Moduls: cdrdao.exe2
Berichtskennung: cdrdao.exe3
Vollständiger Name des fehlerhaften Pakets: cdrdao.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: cdrdao.exe5

Error: (03/03/2014 10:26:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.9200.16384, Zeitstempel: 0x5010a60b
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.2.9200.16451, Zeitstempel: 0x50988a1f
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x00012005
ID des fehlerhaften Prozesses: 0x7a8
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3
Vollständiger Name des fehlerhaften Pakets: MsiExec.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MsiExec.exe5

Error: (03/03/2014 09:34:24 PM) (Source: Windows Search Service) (User: )
Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.

Kontext:  Anwendung, SystemIndex Katalog

Error: (03/03/2014 09:31:56 PM) (Source: Application Hang) (User: )
Description: Programm WWAHost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: cf0

Startzeit: 01cf37173202de20

Endzeit: 4294967295

Anwendungspfad: C:\Windows\System32\WWAHost.exe

Berichts-ID: 7657d656-a30a-11e3-afa4-001d7d9a5cf5

Vollständiger Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Windows.Store

Error: (03/03/2014 09:31:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Han)
Description: Das Paket „winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (01/28/2014 09:06:34 PM) (Source: Desktop Window Manager) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.


System errors:
=============
Error: (04/28/2014 11:29:08 AM) (Source: DCOM) (User: Han)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (04/28/2014 11:28:38 AM) (Source: DCOM) (User: Han)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (04/28/2014 10:59:21 AM) (Source: DCOM) (User: Han)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (04/28/2014 10:41:09 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.

Error: (04/28/2014 10:37:28 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎28.‎04.‎2014 um 10:27:57 unerwartet heruntergefahren.

Error: (04/28/2014 10:37:10 AM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT-AUTORITÄT)
Description: 32212265135462597106362228

Error: (04/28/2014 10:27:35 AM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT-AUTORITÄT)
Description: 32212265135462597106362228

Error: (04/28/2014 10:27:57 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎28.‎04.‎2014 um 00:40:46 unerwartet heruntergefahren.

Error: (04/27/2014 11:59:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (04/27/2014 11:34:02 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BranchCache" wurde mit dem folgenden dienstspezifischen Fehler beendet: 
%%1260


Microsoft Office Sessions:
=========================
Error: (04/27/2014 11:43:34 PM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (04/15/2014 08:45:11 AM) (Source: Desktop Window Manager)(User: )
Description: 0x8898008d

Error: (03/22/2014 10:35:30 PM) (Source: Application Hang)(User: )
Description: uTorrent.exe3.4.0.30660c6001cf460df780f9950C:\Users\[USRNAME]\AppData\Roaming\uTorrent\uTorrent.exe7ee2a833-b201-11e3-afa8-001d7d9a5cf5

Error: (03/05/2014 09:21:42 PM) (Source: Application Error)(User: )
Description: cdrdao.exe0.0.0.0429e389dcygwin1.dll1005.24.0.045c06855c0000005000b48b6c2001cf38a822ff446eC:\Program Files\Exact Audio Copy\cdrdao\cdrdao.exeC:\Program Files\Exact Audio Copy\cdrdao\cygwin1.dll618df28d-a49b-11e3-afa6-001d7d9a5cf5

Error: (03/05/2014 08:24:17 PM) (Source: Application Error)(User: )
Description: cdrdao.exe0.0.0.0429e389dcygwin1.dll1005.24.0.045c06855c0000005000b48b687801cf38a01ddba26fC:\Program Files\Exact Audio Copy\cdrdao\cdrdao.exeC:\Program Files\Exact Audio Copy\cdrdao\cygwin1.dll5c330181-a493-11e3-afa6-001d7d9a5cf5

Error: (03/03/2014 10:26:47 PM) (Source: Application Error)(User: )
Description: MsiExec.exe5.0.9200.163845010a60bKERNELBASE.dll6.2.9200.1645150988a1fc06d007e000120057a801cf371ed57e9c34C:\Windows\system32\MsiExec.exeC:\Windows\system32\KERNELBASE.dll24236087-a312-11e3-afa5-001d7d9a5cf5

Error: (03/03/2014 09:34:24 PM) (Source: Windows Search Service)(User: )
Description: Kontext:  Anwendung, SystemIndex Katalog

Error: (03/03/2014 09:31:56 PM) (Source: Application Hang)(User: )
Description: WWAHost.exe6.2.9200.16420cf001cf37173202de204294967295C:\Windows\System32\WWAHost.exe7657d656-a30a-11e3-afa4-001d7d9a5cf5winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewyWindows.Store

Error: (03/03/2014 09:31:47 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Han)
Description: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy

Error: (01/28/2014 09:06:34 PM) (Source: Desktop Window Manager)(User: )
Description: 0x8898008d


==================== Memory info =========================== 

Percentage of memory in use: 46%
Total physical RAM: 2046.49 MB
Available physical RAM: 1098.53 MB
Total Pagefile: 3198.49 MB
Available Pagefile: 2143.4 MB
Total Virtual: 2047.88 MB
Available Virtual: 1864.2 MB

==================== Drives ================================

Drive c: (SYSTEM) (Fixed) (Total:298.09 GB) (Free:257.9 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 00000001)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Wäre prima, wenn Ihr mir helfen könntet...

Vielen Dank und liebe Grüße,

M4tt0

Alt 28.04.2014, 18:28   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J



hi,

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________

__________________

Alt 28.04.2014, 20:12   #3
M4tt0
 
Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J



Hallo schrauber,

na, da bin ich ja wieder in besten Händen! Danke Dir!

Hier die Logs...

MBAM

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 28.04.2014
Suchlauf-Zeit: 20:23:20
Logdatei: MBAM.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.04.28.08
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x86
Dateisystem: NTFS
Benutzer: [USRNAME]

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 271623
Verstrichene Zeit: 9 Min, 16 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 1
PUP.Optional.OpenCandy, C:\Users\[USRNAME]\Downloads\SetupImgBurn_2.5.8.0.exe, In Quarantäne, [27d91de3dd23ee126c495006a85c4bb5], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         
AdwCleaner

AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v3.205 - Bericht erstellt am 28/04/2014 um 20:30:36
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 8.1 Pro  (32 bits)
# Benutzername : [USRNAME] - HAN
# Gestartet von : C:\Users\[USRNAME]\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [780 octets] - [28/04/2014 20:29:38]
AdwCleaner[S0].txt - [702 octets] - [28/04/2014 20:30:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [761 octets] ##########
         
--- --- ---


JRT

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Pro x86
Ran by [USRNAME] on 28.04.2014 at 20:38:25,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\[USRNAME]\AppData\Roaming\mozilla\firefox\profiles\76jffv28.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.04.2014 at 20:41:39,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Frisches FRST


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014
Ran by [USRNAME] (administrator) on HAN on 28-04-2014 20:57:45
Running from C:\Users\[USRNAME]\Desktop
Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-27] (AVAST Software)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [150208 2014-04-20] (IvoSoft)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3226048418-3006157909-989406201-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3226048418-3006157909-989406201-1004\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [515584 2013-08-22] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Statusfenster.lnk
ShortcutTarget: Canon LBP2900 Statusfenster.lnk -> C:\Windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE (CANON INC.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB5C2046CF412CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default
FF Homepage: hxxp://www.tagesschau.de/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-16]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
S2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [605168 2013-12-20] (Paramount Software UK Ltd)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2014-03-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-27] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [81768 2014-04-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [776976 2014-04-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411552 2014-04-27] (AVAST Software)
S2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [67776 2014-04-27] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-27] ()
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-03-18] (Microsoft Corporation)
S3 gdrv; C:\WINDOWS\gdrv.sys [17488 2014-04-28] (Windows (R) 2000 DDK provider)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-04-28] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-28 20:57 - 2014-04-28 20:57 - 00010257 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 20:41 - 2014-04-28 20:41 - 00000751 _____ () C:\Users\[USRNAME]\Desktop\JRT.txt
2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt
2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt
2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten)
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool
2014-04-28 20:32 - 2014-04-28 20:32 - 00000840 _____ () C:\Users\[USRNAME]\Desktop\AdwCleaner[S0].txt
2014-04-28 20:29 - 2014-04-28 20:30 - 00000000 ____D () C:\AdwCleaner
2014-04-28 20:27 - 2014-04-28 20:28 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe
2014-04-28 20:27 - 2014-04-28 20:27 - 00001232 _____ () C:\Users\[USRNAME]\Desktop\mbam.txt
2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner
2014-04-28 20:12 - 2014-04-28 20:32 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 20:11 - 2014-04-28 20:12 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-28 20:11 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-28 20:11 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-28 20:11 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-28 14:18 - 2014-04-28 20:57 - 00000000 ____D () C:\FRST
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 10:56 - 2014-04-28 10:57 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2014-04-27 23:36 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:13 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-04-28 00:06 - 2014-04-28 00:09 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2014-04-28 00:07 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:52 - 2013-10-31 01:38 - 00202584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-04-27 23:52 - 2013-10-31 01:38 - 00093016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-04-27 23:52 - 2013-10-31 01:36 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-14 20:13 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-27 23:47 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-27 23:47 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-27 23:47 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-27 23:45 - 2014-04-27 23:47 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:24 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:19 - 2014-04-28 20:31 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-27 23:19 - 2014-03-20 23:03 - 00053024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-04-27 23:19 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-04-27 23:19 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe
2014-04-27 23:18 - 2014-04-28 11:55 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 23:18 - 2014-04-27 23:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 22:46 - 2014-04-27 23:33 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 21:26 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 21:25 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-04-28 20:57 - 2014-04-28 20:57 - 00010257 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-28 20:57 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST
2014-04-28 20:50 - 2014-01-16 23:57 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-28 20:41 - 2014-04-28 20:41 - 00000751 _____ () C:\Users\[USRNAME]\Desktop\JRT.txt
2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-28 20:37 - 2014-03-18 10:04 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt
2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt
2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten)
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool
2014-04-28 20:32 - 2014-04-28 20:32 - 00000840 _____ () C:\Users\[USRNAME]\Desktop\AdwCleaner[S0].txt
2014-04-28 20:32 - 2014-04-28 20:12 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 20:32 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-28 20:31 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-28 20:31 - 2014-03-18 01:54 - 00001462 _____ () C:\WINDOWS\PFRO.log
2014-04-28 20:30 - 2014-04-28 20:29 - 00000000 ____D () C:\AdwCleaner
2014-04-28 20:28 - 2014-04-28 20:27 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe
2014-04-28 20:27 - 2014-04-28 20:27 - 00001232 _____ () C:\Users\[USRNAME]\Desktop\mbam.txt
2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner
2014-04-28 20:23 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 20:12 - 2014-04-28 20:11 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-28 19:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 14:15 - 2014-04-27 23:24 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-28 11:55 - 2014-04-27 23:18 - 01414220 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-28 11:28 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-04-28 11:15 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-28 11:05 - 2014-01-16 22:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\ClassicShell
2014-04-28 10:57 - 2014-04-28 10:56 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:56 - 2014-01-17 00:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:47 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\System
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 03:35 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\LogFiles
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 00000000 ____D () C:\Windows.old
2014-04-28 00:16 - 2013-08-22 10:17 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-04-28 00:16 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:09 - 2014-04-28 00:06 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:07 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00776976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00271264 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-04-27 23:58 - 2014-01-16 21:55 - 00180632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00081768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Defender
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-27 23:45 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\Program Files\Java
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:44 - 2014-01-16 22:02 - 00000000 ____D () C:\ProgramData\ClassicShell
2014-04-27 23:44 - 2014-01-16 22:01 - 00000000 ____D () C:\Program Files\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:43 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-04-27 23:38 - 2014-03-18 11:45 - 00000000 ___HD () C:\$Windows.~BT
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-28 00:16 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:34 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows NT
2014-04-27 23:34 - 2013-08-22 08:21 - 00000000 __RHD () C:\Users\Default
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:33 - 2014-04-27 22:46 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 23:33 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Registration
2014-04-27 23:33 - 2013-08-22 09:23 - 00332763 _____ () C:\WINDOWS\setupact.log
2014-04-27 23:32 - 2013-08-22 10:17 - 00000000 __RSD () C:\WINDOWS\Media
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:31 - 2013-08-22 10:17 - 00000000 __RHD () C:\Users\Public\Libraries
2014-04-27 23:31 - 2013-08-22 08:21 - 00000000 ___RD () C:\Users\Public
2014-04-27 23:28 - 2013-08-22 09:22 - 00474824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 23:27 - 2014-04-27 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 23:27 - 2014-03-22 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar
2014-04-27 23:27 - 2014-03-22 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-04-27 23:27 - 2014-03-18 09:45 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-04-27 23:27 - 2014-03-18 09:30 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-04-27 23:27 - 2014-03-05 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlacSquisher
2014-04-27 23:27 - 2014-03-05 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-04-27 23:27 - 2014-03-05 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2014-04-27 23:27 - 2014-03-03 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-27 23:27 - 2014-02-18 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-27 23:27 - 2014-01-17 22:51 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-04-27 23:27 - 2014-01-17 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2014-04-27 23:27 - 2014-01-16 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Player
2014-04-27 23:27 - 2014-01-16 23:26 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-04-27 23:27 - 2013-08-22 10:18 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-04-27 23:27 - 2013-08-22 08:13 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-27 23:27 - 2012-07-26 06:43 - 00000000 ____D () C:\Users\Default.migrated
2014-04-27 23:26 - 2014-04-27 23:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:26 - 2014-03-22 23:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic
2014-04-27 23:26 - 2014-03-22 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
2014-04-27 23:26 - 2014-03-03 21:32 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-04-27 23:26 - 2014-01-16 21:50 - 00000000 ____D () C:\ProgramData\PRICache
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Help
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:25 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:21 - 2014-01-16 21:46 - 00000000 __SHD () C:\Recovery
2014-04-27 23:19 - 2014-04-27 23:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 23:07 - 2014-01-16 21:50 - 02041337 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-04-27 22:51 - 2014-01-16 21:41 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-04-27 22:34 - 2012-07-26 08:53 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-27 21:24 - 2014-01-17 01:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Foxit Software
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-15 11:16 - 2014-01-16 21:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-14 20:13 - 2014-04-27 23:47 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-14 20:05 - 2014-04-27 23:47 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-14 20:05 - 2014-04-27 23:47 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-14 20:04 - 2014-04-27 23:47 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-14 09:14 - 2014-01-16 23:32 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-14 09:11 - 2014-01-16 22:28 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-14 09:10 - 2014-01-16 22:28 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-03 09:51 - 2014-04-28 20:11 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-28 20:11 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-28 20:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-03-31 23:23 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-31 23:23 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Users\[USRNAME]\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\[USRNAME]\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\[USRNAME]\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2014-04-28 00:15] - [2014-04-28 00:15] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75

C:\WINDOWS\system32\winlogon.exe
[2014-03-18 10:08] - [2014-03-18 10:08] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F

C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30

C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2014-03-18 10:08] - [2014-03-18 10:08] - 0265048 ____A (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539



LastRegBack: 2014-04-27 23:17

==================== End Of Log ============================
         
--- --- ---


Beste Grüße,

M4tt0
__________________

Alt 29.04.2014, 17:25   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.04.2014, 08:32   #5
M4tt0
 
Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J



Guten Morgen schrauber,

so, der ESET Scan hat eine Weile gedauert. Gab wieder einen Fund. Diesmal auf einee externen Backup Platte, die ich (nach Anweisung) angeschlossen hatte. Wieder in einem uralten File...

ESET Log

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=de2e89ec0655dd4f931fa8055b14707c
# engine=18078
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-04-29 11:53:37
# local_time=2014-04-30 01:53:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode=774 16777213 71 74 179591 179711 0 0
# compatibility_mode=5893 16776574 100 94 180031 23696931 0 0
# scanned=337018
# found=1
# cleaned=0
# scan_time=14516
sh=EB8624B68DCB390F6776405D1C3FD7781A7D47C8 ft=1 fh=8506fd186def9f7b vn="Win32/Adware.1ClickDownload.AM Anwendung" ac=I fn="I:\MyStorage_1\homes\[USRNAME]\#recycle\[USRNAME]\09_Install\Games\XYZ\XYZ_No_CD_zip.exe"
         
Security Check Log

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.82  
   x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Java 7 Update 55  
 Adobe Flash Player 	13.0.0.206  
 Mozilla Firefox (28.0) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Spybot Teatimer.exe is disabled! 
 system32 AvastSvc.exe -?-   
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C::  
````````````````````End of Log``````````````````````
         
Frisches FRST


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-04-2014
Ran by [USRNAME] (administrator) on HAN on 30-04-2014 08:59:27
Running from C:\Users\[USRNAME]\Desktop
Microsoft Windows 8.1 Pro Update 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Foxit Corporation) C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Microsoft Corporation) C:\WINDOWS\system32\dashost.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Paramount Software UK Ltd) C:\Program Files\Macrium\Reflect\ReflectService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MsoSync.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\WMIADAP.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-27] (AVAST Software)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [150208 2014-04-20] (IvoSoft)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3226048418-3006157909-989406201-1001\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-3226048418-3006157909-989406201-1004\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [515584 2013-08-22] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Canon LBP2900 Statusfenster.lnk
ShortcutTarget: Canon LBP2900 Statusfenster.lnk -> C:\Windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE (CANON INC.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB5C2046CF412CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default
FF Homepage: hxxp://www.tagesschau.de/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL No File
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: NoScript - C:\Users\[USRNAME]\AppData\Roaming\Mozilla\Firefox\Profiles\76jffv28.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-16]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-27] (AVAST Software)
R2 FoxitCloudUpdateService; C:\Program Files\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation)
R2 ReflectService.exe; C:\Program Files\Macrium\Reflect\ReflectService.exe [605168 2013-12-20] (Paramount Software UK Ltd)
S3 ScDeviceEnum; C:\WINDOWS\System32\ScDeviceEnum.dll [105472 2013-08-22] (Microsoft Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280296 2013-10-31] (Microsoft Corporation)
S3 WEPHOSTSVC; C:\WINDOWS\system32\wephostsvc.dll [20992 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22224 2013-10-31] (Microsoft Corporation)
S3 workfolderssvc; C:\WINDOWS\system32\workfolderssvc.dll [1210368 2014-03-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-04-27] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-04-27] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [81768 2014-04-27] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-04-27] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [776976 2014-04-27] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [411552 2014-04-27] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [67776 2014-04-27] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180632 2014-04-27] ()
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [25600 2014-03-18] (Microsoft Corporation)
S3 gdrv; C:\WINDOWS\gdrv.sys [17488 2014-04-28] (Windows (R) 2000 DDK provider)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2013-07-23] (Intel Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2014-04-03] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [107736 2014-04-30] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [51416 2014-04-03] (Malwarebytes Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [93016 2013-10-31] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [138584 2014-04-28] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-30 08:59 - 2014-04-30 08:59 - 00011284 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-30 08:59 - 2014-04-30 08:59 - 00000892 _____ () C:\Users\[USRNAME]\Desktop\checkup.txt
2014-04-30 08:57 - 2014-04-30 08:57 - 00855379 _____ () C:\Users\[USRNAME]\Desktop\SecurityCheck.exe
2014-04-30 08:57 - 2014-04-29 21:47 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\08_Security Check
2014-04-30 08:56 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\09_FRST (zum Dritten) - Kopie
2014-04-29 21:48 - 2014-04-29 21:48 - 02347384 _____ (ESET) C:\Users\[USRNAME]\Desktop\esetsmartinstaller_deu.exe
2014-04-29 21:48 - 2014-04-29 21:48 - 00000000 ____D () C:\Program Files\ESET
2014-04-29 21:47 - 2014-04-29 21:47 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\07_ESET Online
2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt
2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt
2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten)
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool
2014-04-28 20:29 - 2014-04-28 20:30 - 00000000 ____D () C:\AdwCleaner
2014-04-28 20:27 - 2014-04-28 20:28 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe
2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner
2014-04-28 20:12 - 2014-04-30 08:55 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 20:11 - 2014-04-28 20:12 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-28 20:11 - 2014-04-03 09:51 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-28 20:11 - 2014-04-03 09:51 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-28 20:11 - 2014-04-03 09:50 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-04-28 14:18 - 2014-04-30 08:59 - 00000000 ____D () C:\FRST
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 10:56 - 2014-04-28 10:57 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2014-04-27 23:36 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:13 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-04-28 00:13 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-04-28 00:06 - 2014-04-30 08:21 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-28 00:06 - 2014-04-28 00:09 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:52 - 2013-10-31 01:38 - 00202584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-04-27 23:52 - 2013-10-31 01:38 - 00093016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-04-27 23:52 - 2013-10-31 01:36 - 00030224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-14 20:13 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-27 23:47 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-27 23:47 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-27 23:47 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-27 23:45 - 2014-04-27 23:47 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:24 - 2014-04-28 14:15 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:24 - 2014-04-27 23:33 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-04-27 23:24 - 2014-03-18 10:08 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:24 - 2013-08-22 10:17 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-04-27 23:19 - 2014-04-30 08:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-27 23:19 - 2014-03-20 23:03 - 00053024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 04348704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 03044696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 02556360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00663896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2014-04-27 23:19 - 2014-03-04 14:34 - 00375128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2014-04-27 23:19 - 2014-03-04 14:34 - 00062752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2014-04-27 23:19 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvStreaming.exe
2014-04-27 23:18 - 2014-04-30 02:07 - 01539490 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-27 23:18 - 2014-04-27 23:26 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 22:46 - 2014-04-27 23:33 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 21:26 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 21:25 - 2014-04-27 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox

==================== One Month Modified Files and Folders =======

2014-04-30 08:59 - 2014-04-30 08:59 - 00011284 _____ () C:\Users\[USRNAME]\Desktop\FRST.txt
2014-04-30 08:59 - 2014-04-30 08:59 - 00000892 _____ () C:\Users\[USRNAME]\Desktop\checkup.txt
2014-04-30 08:59 - 2014-04-28 14:18 - 00000000 ____D () C:\FRST
2014-04-30 08:57 - 2014-04-30 08:57 - 00855379 _____ () C:\Users\[USRNAME]\Desktop\SecurityCheck.exe
2014-04-30 08:55 - 2014-04-28 20:12 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-04-30 08:55 - 2013-08-22 09:23 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-30 08:54 - 2014-04-27 23:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-04-30 08:23 - 2014-01-16 22:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\ClassicShell
2014-04-30 08:21 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-04-30 07:50 - 2014-01-16 23:57 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-04-30 07:00 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-04-30 05:10 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\rescache
2014-04-30 05:05 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Microsoft.NET
2014-04-30 02:07 - 2014-04-27 23:18 - 01539490 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-30 01:55 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-04-29 21:49 - 2014-03-18 10:04 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-04-29 21:48 - 2014-04-29 21:48 - 02347384 _____ (ESET) C:\Users\[USRNAME]\Desktop\esetsmartinstaller_deu.exe
2014-04-29 21:48 - 2014-04-29 21:48 - 00000000 ____D () C:\Program Files\ESET
2014-04-29 21:47 - 2014-04-30 08:57 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\08_Security Check
2014-04-29 21:47 - 2014-04-29 21:47 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\07_ESET Online
2014-04-29 21:45 - 2013-08-22 09:23 - 00333558 _____ () C:\WINDOWS\setupact.log
2014-04-28 20:38 - 2014-04-28 20:38 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-04-28 20:36 - 2014-04-28 20:36 - 00000569 _____ () C:\Users\[USRNAME]\Desktop\FRST README.txt
2014-04-28 20:35 - 2014-04-28 20:35 - 00000547 _____ () C:\Users\[USRNAME]\Desktop\JRT README.txt
2014-04-28 20:34 - 2014-04-30 08:56 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\09_FRST (zum Dritten) - Kopie
2014-04-28 20:34 - 2014-04-28 20:34 - 01016261 _____ (Thisisu) C:\Users\[USRNAME]\Desktop\JRT.exe
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\06_FRST (zum Zweiten)
2014-04-28 20:34 - 2014-04-28 20:34 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\05_Junkware Removal Tool
2014-04-28 20:31 - 2014-03-18 01:54 - 00001462 _____ () C:\WINDOWS\PFRO.log
2014-04-28 20:30 - 2014-04-28 20:29 - 00000000 ____D () C:\AdwCleaner
2014-04-28 20:28 - 2014-04-28 20:27 - 01310283 _____ () C:\Users\[USRNAME]\Desktop\adwcleaner.exe
2014-04-28 20:27 - 2014-04-28 20:27 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\04_AdvCleaner
2014-04-28 20:23 - 2013-08-22 08:13 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-04-28 20:12 - 2014-04-28 20:12 - 00001078 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-04-28 20:12 - 2014-04-28 20:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-04-28 20:12 - 2014-04-28 20:11 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-04-28 20:11 - 2014-04-28 20:11 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\[USRNAME]\Downloads\mbam-setup-2.0.1.1004.exe
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\Users\[USRNAME]\Desktop\03_MBAM
2014-04-28 20:11 - 2014-04-28 20:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-04-28 14:16 - 2014-04-28 14:16 - 01049600 _____ (Farbar) C:\Users\[USRNAME]\Desktop\FRST.exe
2014-04-28 14:15 - 2014-04-28 14:15 - 00000000 _____ () C:\Users\[USRNAME]\defogger_reenable
2014-04-28 14:15 - 2014-04-27 23:24 - 00000000 ____D () C:\Users\[USRNAME]
2014-04-28 10:57 - 2014-04-28 10:56 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\WINDOWS\gdrv.sys
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2014-04-28 10:56 - 2014-04-28 10:56 - 00000000 ____D () C:\Program Files\GIGABYTE
2014-04-28 10:56 - 2014-01-17 00:40 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-04-28 10:55 - 2014-04-28 10:55 - 05350367 _____ () C:\Users\[USRNAME]\Downloads\motherboard_utility_atbios.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00256192 _____ (Microsoft Corporation) C:\WINDOWS\winhelp.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\system32\lanman.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00177856 _____ (Microsoft Corporation) C:\WINDOWS\system32\typelib.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00169520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2disp.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00153008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2nls.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00127213 _____ () C:\WINDOWS\system32\ega.cpi
2014-04-28 10:47 - 2014-04-28 10:47 - 00108464 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00092320 _____ (Microsoft Corporation) C:\WINDOWS\system32\krnl386.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\olecli.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00069886 _____ () C:\WINDOWS\system32\edit.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00068992 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\graftabl.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00053600 _____ () C:\WINDOWS\system32\dosx.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00050648 _____ () C:\WINDOWS\system32\COMMAND.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00047840 _____ (Microsoft Corporation) C:\WINDOWS\system32\USER.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pmspl.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042809 _____ () C:\WINDOWS\system32\KEY01.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00042592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00042537 _____ () C:\WINDOWS\system32\KEYBOARD.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDEML.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00039274 _____ () C:\WINDOWS\system32\mem.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00035776 _____ () C:\WINDOWS\system32\NTIO411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00035552 _____ () C:\WINDOWS\system32\NTIO412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00034688 _____ () C:\WINDOWS\system32\NTIO404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00033968 _____ () C:\WINDOWS\system32\NTIO.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00032816 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00029370 _____ () C:\WINDOWS\system32\NTDOS411.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029274 _____ () C:\WINDOWS\system32\NTDOS412.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS804.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00029146 _____ () C:\WINDOWS\system32\NTDOS404.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00028420 _____ () C:\WINDOWS\system32\bios1.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00028112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DRWATSON.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00027866 _____ () C:\WINDOWS\system32\NTDOS.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00027792 _____ (Microsoft Corporation) C:\WINDOWS\system32\compobj.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ctl3dv2.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00027097 _____ () C:\WINDOWS\system32\country.sys
2014-04-28 10:47 - 2014-04-28 10:47 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\GDI.EXE
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdmredir.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00021232 _____ () C:\WINDOWS\system32\graphics.pro
2014-04-28 10:47 - 2014-04-28 10:47 - 00020634 _____ () C:\WINDOWS\system32\debug.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00019694 _____ () C:\WINDOWS\system32\GRAPHICS.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00018896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysedit.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00018832 _____ () C:\WINDOWS\system32\v7vga.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00014710 _____ () C:\WINDOWS\system32\KB16.COM
2014-04-28 10:47 - 2014-04-28 10:47 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdmd.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00013888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TOOLHELP.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00013312 _____ () C:\WINDOWS\system32\win87em.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012704 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2014-04-28 10:47 - 2014-04-28 10:47 - 00012642 _____ () C:\WINDOWS\system32\edlin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00012498 _____ () C:\WINDOWS\system32\append.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00011753 _____ () C:\WINDOWS\system32\setver.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00010790 _____ () C:\WINDOWS\system32\EDIT.HLP
2014-04-28 10:47 - 2014-04-28 10:47 - 00010544 _____ (Microsoft Corporation) C:\WINDOWS\system32\COMM.drv
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system32\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\lzexpand.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WIFEMAN.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00009029 _____ () C:\WINDOWS\system32\ANSI.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00009008 _____ (Microsoft Corporation) C:\WINDOWS\system\ver.dll
2014-04-28 10:47 - 2014-04-28 10:47 - 00008424 _____ () C:\WINDOWS\system32\exe2bin.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win.com
2014-04-28 10:47 - 2014-04-28 10:47 - 00008191 _____ () C:\WINDOWS\system32\bios4.rom
2014-04-28 10:47 - 2014-04-28 10:47 - 00007052 _____ () C:\WINDOWS\system32\nlsfunc.exe
2014-04-28 10:47 - 2014-04-28 10:47 - 00005532 _____ (Microsoft Corporation) C:\WINDOWS\system\stdole.tlb
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WINNLS.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2014-04-28 10:47 - 2014-04-28 10:47 - 00004768 _____ () C:\WINDOWS\system32\HIMEM.SYS
2014-04-28 10:47 - 2014-04-28 10:47 - 00004208 _____ (Microsoft Corporation) C:\WINDOWS\system32\storage.dll
2014-04-28 10:47 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\System
2014-04-28 10:46 - 2014-04-28 10:46 - 00528620 _____ (Igor Pavlov) C:\Users\[USRNAME]\Downloads\motherboard_bios_ga-p31-ds3l_f9.exe
2014-04-28 03:35 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\LogFiles
2014-04-28 00:16 - 2014-04-28 00:16 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 01634304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-04-28 00:16 - 2014-04-28 00:16 - 00049544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-04-28 00:16 - 2013-08-22 10:17 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-04-28 00:16 - 2013-08-22 10:17 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-04-28 00:15 - 2014-04-28 00:15 - 18679216 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 12732416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 11791360 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 05786968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 03562496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01871192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01679704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01326936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01200296 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01092896 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 01037504 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00863552 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00839168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00833536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00482416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00406512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00388408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-04-28 00:15 - 2014-04-28 00:15 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00321880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00295256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00286040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-04-28 00:15 - 2014-04-28 00:15 - 00283992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-04-28 00:15 - 2014-04-28 00:15 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDScDrv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00194752 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00147800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00138584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-04-28 00:15 - 2014-04-28 00:15 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-04-28 00:15 - 2014-04-28 00:15 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-04-28 00:15 - 2014-04-28 00:15 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-04-28 00:14 - 2014-04-28 00:14 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\WINDOWS\system32\XPSViewer
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-04-28 00:13 - 2014-04-28 00:13 - 00000000 ____D () C:\Program Files\MSBuild
2014-04-28 00:09 - 2014-04-28 00:06 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-04-28 00:06 - 2014-04-28 00:06 - 00002149 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-04-28 00:06 - 2014-04-28 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-04-28 00:05 - 2014-04-28 00:05 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\[USRNAME]\Downloads\spybot-2.2.25.exe
2014-04-27 23:58 - 2014-04-27 23:58 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-04-27 23:58 - 2014-04-27 23:58 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00776976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00271264 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-04-27 23:58 - 2014-01-16 21:55 - 00180632 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00081768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00067776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2014-04-27 23:58 - 2014-01-16 21:55 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:53 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows Defender
2014-04-27 23:52 - 2014-04-27 23:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-04-27 23:47 - 2014-04-27 23:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-27 23:47 - 2014-04-27 23:45 - 00004155 _____ () C:\WINDOWS\system32\jupdate-1.7.0_55-b14.log
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-27 23:47 - 2014-01-17 23:15 - 00000000 ____D () C:\Program Files\Java
2014-04-27 23:44 - 2014-04-27 23:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell
2014-04-27 23:44 - 2014-01-16 22:02 - 00000000 ____D () C:\ProgramData\ClassicShell
2014-04-27 23:44 - 2014-01-16 22:01 - 00000000 ____D () C:\Program Files\Classic Shell
2014-04-27 23:43 - 2014-04-27 23:43 - 06869696 _____ (IvoSoft) C:\Users\[USRNAME]\Downloads\ClassicShellSetup_4_1_0-de.exe
2014-04-27 23:43 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Local\NVIDIA
2014-04-27 23:37 - 2014-04-27 23:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-04-27 23:36 - 2014-04-28 00:16 - 00000000 ___DC () C:\WINDOWS\Panther
2014-04-27 23:36 - 2014-04-27 23:36 - 00001456 _____ () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-27 23:36 - 2014-04-27 23:36 - 00000020 ___SH () C:\Users\[USRNAME]\ntuser.ini
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-04-27 23:34 - 2014-04-27 23:34 - 00000000 _SHDL () C:\Programme
2014-04-27 23:34 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Windows NT
2014-04-27 23:34 - 2013-08-22 08:21 - 00000000 __RHD () C:\Users\Default
2014-04-27 23:33 - 2014-04-27 23:33 - 00021532 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-04-27 23:33 - 2014-04-27 23:24 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-04-27 23:33 - 2014-04-27 22:46 - 00006674 _____ () C:\WINDOWS\comsetup.log
2014-04-27 23:33 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Registration
2014-04-27 23:32 - 2013-08-22 10:17 - 00000000 __RSD () C:\WINDOWS\Media
2014-04-27 23:31 - 2014-04-27 23:31 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-04-27 23:31 - 2013-08-22 10:17 - 00000000 __RHD () C:\Users\Public\Libraries
2014-04-27 23:31 - 2013-08-22 08:21 - 00000000 ___RD () C:\Users\Public
2014-04-27 23:28 - 2013-08-22 09:22 - 00474824 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-04-27 23:27 - 2014-04-27 23:27 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 23:27 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help
2014-04-27 23:27 - 2014-04-27 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-04-27 23:27 - 2014-04-27 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-04-27 23:27 - 2014-03-22 23:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickPar
2014-04-27 23:27 - 2014-03-22 21:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2014-04-27 23:27 - 2014-03-18 09:45 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-04-27 23:27 - 2014-03-18 09:30 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-04-27 23:27 - 2014-03-05 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlacSquisher
2014-04-27 23:27 - 2014-03-05 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-04-27 23:27 - 2014-03-05 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy
2014-04-27 23:27 - 2014-03-03 21:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-04-27 23:27 - 2014-02-18 23:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-27 23:27 - 2014-01-17 22:51 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2014-04-27 23:27 - 2014-01-17 19:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2014-04-27 23:27 - 2014-01-16 23:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Player
2014-04-27 23:27 - 2014-01-16 23:26 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-04-27 23:27 - 2013-08-22 10:18 - 00004893 _____ () C:\WINDOWS\DtcInstall.log
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-04-27 23:27 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\de-DE
2014-04-27 23:27 - 2013-08-22 08:13 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM
2014-04-27 23:27 - 2012-07-26 06:43 - 00000000 ____D () C:\Users\Default.migrated
2014-04-27 23:26 - 2014-04-27 23:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-04-27 23:26 - 2014-03-22 23:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic
2014-04-27 23:26 - 2014-03-22 21:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codemasters
2014-04-27 23:26 - 2014-03-03 21:32 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-04-27 23:26 - 2014-01-16 21:50 - 00000000 ____D () C:\ProgramData\PRICache
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\Help
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-04-27 23:26 - 2013-08-22 10:17 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-04-27 23:25 - 2014-04-27 23:25 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-04-27 23:25 - 2013-08-22 10:17 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\[USRNAME]\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\[USRNAME]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-04-27 23:24 - 2014-04-27 23:24 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-04-27 23:21 - 2014-01-16 21:46 - 00000000 __SHD () C:\Recovery
2014-04-27 23:19 - 2014-04-27 23:18 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-04-27 23:18 - 2014-04-27 23:18 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-04-27 23:07 - 2014-01-16 21:50 - 02041337 _____ () C:\WINDOWS\WindowsUpdate (1).log
2014-04-27 22:51 - 2014-01-16 21:41 - 00008192 __RSH () C:\BOOTSECT.BAK
2014-04-27 22:34 - 2012-07-26 08:53 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-04-27 21:25 - 2014-04-27 21:25 - 00000000 ____D () C:\Program Files\Foxit Software
2014-04-27 21:24 - 2014-04-27 21:24 - 33488656 _____ (Foxit Corporation ) C:\Users\[USRNAME]\Downloads\FoxitReader614.0217_enu_Setup.exe
2014-04-27 21:24 - 2014-01-17 01:02 - 00000000 ____D () C:\Users\[USRNAME]\AppData\Roaming\Foxit Software
2014-04-23 02:24 - 2013-08-22 10:18 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-04-23 02:24 - 2013-08-22 10:18 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-04-20 10:17 - 2014-04-20 10:17 - 00244928 _____ (IvoSoft) C:\WINDOWS\system32\StartMenuHelper32.dll
2014-04-15 11:16 - 2014-01-16 21:58 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-04-14 20:13 - 2014-04-27 23:47 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-04-14 20:07 - 2014-04-14 20:07 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-14 20:05 - 2014-04-27 23:47 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-04-14 20:05 - 2014-04-27 23:47 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-04-14 20:04 - 2014-04-27 23:47 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-04-14 09:14 - 2014-01-16 23:32 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-14 09:11 - 2014-01-16 22:28 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-04-14 09:10 - 2014-01-16 22:28 - 88028728 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-04-03 09:51 - 2014-04-28 20:11 - 00073432 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-04-28 20:11 - 00051416 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-04-28 20:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

Some content of TEMP:
====================
C:\Users\[USRNAME]\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\[USRNAME]\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\[USRNAME]\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2014-04-28 00:15] - [2014-04-28 00:15] - 2088160 ____A (Microsoft Corporation) 119E091B5386379BC5AA598BE9440C75

C:\WINDOWS\system32\winlogon.exe
[2014-03-18 10:08] - [2014-03-18 10:08] - 0459264 ____A (Microsoft Corporation) 70C57DC69D4A7D92D2CAC90C3AD16E6F

C:\WINDOWS\system32\wininit.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 1370696 ____A (Microsoft Corporation) 43B0EB86B10506AD564E2005A6156D30

C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll
[2014-03-18 10:08] - [2014-03-18 10:08] - 0593408 ____A (Microsoft Corporation) 05C0337538BEECC04FC695808EFF201C

 ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\WINDOWS\system32\Drivers\volsnap.sys
[2014-03-18 10:08] - [2014-03-18 10:08] - 0265048 ____A (Microsoft Corporation) 085918BF459BCB835CFC535BE7138539



LastRegBack: 2014-04-27 23:17

==================== End Of Log ============================
         
--- --- ---

--- --- ---


Ich würde Dir auch gerne noch ein paar kurze Fragen zu den verschiedenen Scans/Funden stellen:

1. Die Attention Warnung am Ende von FRST ist nie weg gegangen. Ist die unbedenklich?
2. Meine externe Festplatte, auf der von ESET 1ClickDownload gefunden wurde, ist im Wesentlichen das Backup meines Fileservers (DS209 NAS). Dort sind alle Arbeitsdokumente, Fotos, etc. ausgelagert. Ich nutze meine Rechner fast nur als "Terminal." Ich habe auf meinen Rechnern zwei Netzlaufwerk permanent eingebunden. Wurden die von ESET (oder den anderen Scannern vorher) mitgescannt? Muss ich die nicht eingebundenen NAS Laufwerke separat scannen? Frage einfach desegen, weil ich sicherstellen moechte, dass ich mir nicht ueber das NAS irgendwelche Probleme wieder zurückhole...
3. Ich habe zu Agent-CYP keine vernuenftigen Infos im Netz gefunden, nur, dass das Ding anscheinend wieder relativ alt ist, aber auch, dass es sich um einen Backdoor Virus handelt. Ich habe entsprechend Bedenken, dass ich mir einen Keylogger gefangen habe. Alle Passwörter ändern macht wahrscheinlich Sinn. Aber kann ich jetzt davon ausgehen keinen Keylogger (mehr) auf dem System zu haben?
4. Nach den Beschreibungen vermute(!) ich, dass die anderen Funde zwar lästig, aber sicherheitstechnisch nicht sooo relevant waren. Ist das richtig oder siehst Du das anders?

Zu Deiner Frage: Probleme hatte ich mit dem Rechner eigentlich nicht. Zumindest ist mir nichts aufgefallen. War ein altes Vista System, das ich vor ca. 1 Jahr per Win 8 Upgrade Offer aktualisiert habe, und nun kuerzlich auf 8.1. Teilweise sind die Funde ja auch im "alten" System (windows.old), was die Sache aber natuerlich auch nicht besser macht...

Junge, Junge, ich dachte eigentlich, dass ich schon viele Jahre relativ umsichtig agiere. Man lernt immer noch dazu...

Erneut allerbesten Dank fuer Deine Hilfe und beste Gruesse,

M4tt0


Alt 01.05.2014, 06:18   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J



Zitat:
1. Die Attention Warnung am Ende von FRST ist nie weg gegangen. Ist die unbedenklich?
Ja da die MD5 der Datei in Ordnung ist.
Zitat:
2. Meine externe Festplatte, auf der von ESET 1ClickDownload gefunden wurde, ist im Wesentlichen das Backup meines Fileservers (DS209 NAS). Dort sind alle Arbeitsdokumente, Fotos, etc. ausgelagert. Ich nutze meine Rechner fast nur als "Terminal." Ich habe auf meinen Rechnern zwei Netzlaufwerk permanent eingebunden. Wurden die von ESET (oder den anderen Scannern vorher) mitgescannt? Muss ich die nicht eingebundenen NAS Laufwerke separat scannen? Frage einfach desegen, weil ich sicherstellen moechte, dass ich mir nicht ueber das NAS irgendwelche Probleme wieder zurückhole...
Die kannst Du separat scannen, mit deinem AV oder so, aber eigentlich unbedenklich.
Zitat:
3. Ich habe zu Agent-CYP keine vernuenftigen Infos im Netz gefunden, nur, dass das Ding anscheinend wieder relativ alt ist, aber auch, dass es sich um einen Backdoor Virus handelt. Ich habe entsprechend Bedenken, dass ich mir einen Keylogger gefangen habe. Alle Passwörter ändern macht wahrscheinlich Sinn. Aber kann ich jetzt davon ausgehen keinen Keylogger (mehr) auf dem System zu haben?
Keylogger war da nie drauf, Passwörter #ndern ist trotzdem nit schlecht. INfektion war sehr warscheinlich nur im Java Cache.
Zitat:
4. Nach den Beschreibungen vermute(!) ich, dass die anderen Funde zwar lästig, aber sicherheitstechnisch nicht sooo relevant waren. Ist das richtig oder siehst Du das anders?
korrekt

Windows-old Ordner würde ich komplett entsorgen, wenn Du evtl vorhandene private Daten darin gesichert hast. Das bringt SPeicherplatz.

Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
--> Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J

Alt 04.05.2014, 16:49   #7
M4tt0
 
Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J



Hallo schrauber,

Sorry fuer die spaete Antwort, war eine Weile off-line. Erst nochmal Danke. Ich habe beide Systeme entsprechend Deiner Tipps gesichert und die Kisten laufen absolut rund. Da ich nun MBAM nutze, habe ich Spybot deinstalliert. Hoffe das macht Sinn.

Der Scan des NAS hat eine Weile gedauert. Ich habe das Synology Antivirus Essential Paket installiert und das NAS damit scannen lassen. Scheint eine Implementierung von ClamAV zu sein (vielleicht sagt Dir das was, mir nicht).

Hier der Log-File

Code:
ATTFilter
 ID Category Module   Event                                                        Date
  1 info     scanner  Report: 147147 file(s) are scanned, 0 infected file(s) found. All infected files are handled. 2014-05-04 07:08:12
  2 info     scanner  Full Scan Completed                                          2014-05-04 07:08:11
  3 info     scanner  Full Scan Started                                            2014-05-02 22:35:24
  4 info     updater  Already Up to Date                                           2014-05-02 22:35:24
  5 info     updater  Update Started                                               2014-05-02 22:33:41
  6 info     scanner  Report: 147147 file(s) are scanned, 2 infected file(s) found. All infected files are handled. 2014-05-02 22:31:37
  7 info     scanner  Full Scan Completed                                          2014-05-02 22:31:37
  8 info     scanner  /volume1/homes/[USRNAME]/[USRNAME]/09_Install/Multimedia/[SOME PROGRAM]/[PROG].exe is moved to Quarantine. 2014-05-02 00:37:29
  9 detected scanner  /volume1/homes/[USRNAME]/[USRNAME]/09_Install/Multimedia/[SOME PROGRAM]/[PROG].exe : Win.Trojan.Tufik-69 FOUND
 2014-05-02 00:37:28
 10 info     scanner  /volume1/homes/[USRNAME]/[USRNAME]/20_Security/Gigabyte PC Trojaner Check/08_Security Check/SecurityCheck.exe is moved to Quarantine. 2014-05-01 20:42:21
 11 detected scanner  /volume1/homes/[USRNAME]/[USRNAME]/20_Security/Gigabyte PC Trojaner Check/08_Security Check/SecurityCheck.exe : Win.Trojan.Injector-11513 FOUND
 2014-05-01 20:42:20
 12 info     scanner  Full Scan Started                                            2014-05-01 11:17:22
 13 info     updater  Already Up to Date                                           2014-05-01 11:17:22
 14 info     updater  Update Started                                               2014-05-01 11:17:04
 15 info     scanner  Report: 0 file(s) are scanned, 0 infected file(s) found. All infected files are handled. 2014-05-01 11:16:50
 16 info     scanner  Task Terminated                                              2014-05-01 11:16:50
 17 info     scanner  Full Scan Started                                            2014-05-01 11:15:52
 18 info     updater  Already Up to Date                                           2014-05-01 11:15:51
 19 info     updater  Update Started                                               2014-05-01 11:15:30
 20 info     updater  Update Completed                                             2014-05-01 11:15:06
 21 info     updater  Update Started                                               2014-05-01 11:04:48
 22 info     scanner  Task Terminated                                              2012-10-06 23:16:27
 23 info     scanner  Full Scan Started                                            2012-10-06 01:00:56
 24 info     updater  Update Completed                                             2012-10-06 01:00:56
 25 info     updater  Update Started                                               2012-10-06 01:00:02
 26 info     updater  Antivirus Essential installation complete                    2012-10-05 23:25:03
         
Zwei "Funde", der erste wieder eine "Altlast", sprich ein Programm, das ich schon seit Jahren nicht genutzt habe. Der zweite in der SecurityCheck.exe, die ich von Euch habe. Denke aber mal, dass das in Ordnung geht (false finding)?

Beide Files wurden in Quarantäne geschoben. Ich werde die gleichen Files nun noch vom Backup loeschen. Wenn das so reicht, glaube ich war's das. OK aus Deiner Sicht, oder soll ich anders verfahren?

Mit besten Grüßen,

M4tt0

Alt 05.05.2014, 11:58   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Standard

Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J



Nö, passt
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J
4d36e972-e325-11ce-bfc1-08002be10318, adware, agent-cyp, antivirus, browser, desktop, excel, flash player, homepage, iframe-inf, installation, lightning, monitor, mp3, msiexec.exe, onedrive, outlook 2013, prima, pup.optional.opencandy, realtek, refresh, rundll, safer networking, scan, security, services.exe, software, somoto-j, starten, svchost.exe, win32/adware.1clickdownload.am, windows.old



Ähnliche Themen: Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J


  1. Avira meldet Pua Somoto Gen 2
    Plagegeister aller Art und deren Bekämpfung - 06.07.2015 (15)
  2. Avast meldet Virus
    Log-Analyse und Auswertung - 29.01.2015 (22)
  3. Windows 7: Avast meldet URL:Mal
    Plagegeister aller Art und deren Bekämpfung - 26.09.2014 (31)
  4. Windows 7: Avast! hat Win32:Somoto gefunden
    Log-Analyse und Auswertung - 29.07.2014 (9)
  5. Bootscan Avast Virus Names Win32:Somoto-J gefunden
    Log-Analyse und Auswertung - 18.03.2014 (12)
  6. Avira meldet Fund JS/iFrame.EB.361
    Plagegeister aller Art und deren Bekämpfung - 07.03.2014 (13)
  7. Mit Avast bei Boot-Scan viele Somoto-C,J,F / Maleware GEN gefunden!
    Plagegeister aller Art und deren Bekämpfung - 06.12.2013 (14)
  8. Sefnit-HU, Agent-ASEB, Agent-ARQX von Avast gefunden...
    Plagegeister aller Art und deren Bekämpfung - 20.11.2013 (23)
  9. AVAST meldet Agent-CDG
    Log-Analyse und Auswertung - 10.10.2013 (13)
  10. Antivir meldet "JS/iFrame.TD"
    Log-Analyse und Auswertung - 01.05.2013 (7)
  11. Avast findet Trojaner "JS:Iframe-ZU"
    Plagegeister aller Art und deren Bekämpfung - 18.02.2013 (13)
  12. Avira meldet HTML/Dldr.Iframe.HJ, was ist das?
    Log-Analyse und Auswertung - 14.01.2013 (15)
  13. Avast meldet URL:Mal fehler
    Log-Analyse und Auswertung - 18.09.2012 (1)
  14. Avira meldet HTML/IFrame.puas in Firefox Profile
    Plagegeister aller Art und deren Bekämpfung - 26.12.2011 (2)
  15. Avast meldet einen Fehler beim Scan und zwar infiziert von Java: Agent-VN (Expl)
    Plagegeister aller Art und deren Bekämpfung - 07.11.2011 (1)
  16. Avast meldet Win32Trojan-gen
    Log-Analyse und Auswertung - 27.12.2008 (1)
  17. AVAST meldet VBS:Malware gen
    Log-Analyse und Auswertung - 25.01.2008 (0)

Zum Thema Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J - Liebes Board, nachdem ich mich kuerzlich mit meinem Laptop auseinandergesetzt habe, weil ich dachte ich hätte einen Virus (aber keinen hatte), habe ich mir nun meinen aelteren Desktop vorgeknoepft. Ich - Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J...
Archiv
Du betrachtest: Win 8.1: Avast meldet Iframe-inf, JS: Agent-CYP und Somoto-J auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.